meifukun

Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource

Apache Roller: WSSE digest authentication headers can be replayed

Apache Roller: OAuth authorization endpoint trusts request-supplied identity

Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers

Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups

Apache Roller: XML external entity processing in trackback response parser

Apache Roller: Server-side request forgery via entry trackback and enclosure URLs

Apache Roller: Anonymous setup action allows frontpage configuration tampering

Apache Roller: Reflected cross-site scripting in the frontpage directory parameter

Apache Roller: Stored cross-site scripting in the authoring UI